True - it's the (many many documented[1]) cases where the SQLi grabs the passwor... | Hacker News

Hacker Timesnew | past | comments | ask | show | jobs | submit

bigiain on July 31, 2015 | parent | context | favorite | on: GitHub Raises $250M at $2B Valuation

True - it's the (many many documented[1]) cases where the SQLi grabs the password_cleartext column, not the encrypted_hash one that worry me here.

[1] http://plaintextoffenders.com/

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact